dkerwin / django-pki Goto Github PK

Reusabe pki app powered by Django

Home Page: http://dkerwin.github.com/django-pki/

License: Other

Shell 1.24% JavaScript 4.66% Python 94.10%

django-pki's Introduction

Hi there 👋

I'm Daniel (he/him). I am an experienced leader in the Ops/Platform/DevOps/SRE space with a passion for people AND technology.

My Background 🕰️

My professional journey started in a classical IT operations role in 2000, managing systems for an online Bank. I've traversed through big corporates and small startups, and I'm currently working for Gini, a German FinTech, and I'm in charge of the platform and IT. My responsibility is to enable cross-functional product teams with a platform based on Kubernetes for fast and reliable delivery. Millions of people use the platform in Europe each month.

I'm passionate about ✨

Leadership, especially in the context of self-organization
coaching, growing, and enabling people
the cloud-native ecosystem
programming in Go
becoming a better version of myself

Technologies I 💙

OS
- Server: Linux. Primarily Debian-based, but I have a seasoned history with other flavors like Gentoo, too 😏
- Client: Apple MBP 🍏
Cloud Provider
- AWS. It is my daily work, and I also had some exposure to GCP. Not used Azure yet
Kubernetes
- I've been using it for years on bare-🤘 and the ☁️, and it has served me well
- CNI: Cilium. eBPF is the future, and the stuff the folks at Isovalent do is just amazing 🍯
Monitoring
- Sysdig Monitor & Secure. The products are getting better every day, and the kernel integration may really open your eyes 👀
- Prometheus. It's the cloud-native way, and it is also nicely integrated into Sysdig 😏
Observability
- Honeycomb: Delightful to implement and crazy powerful 🐝
Networking
- VPN: Tailscale. Not even a question. One of the simplest and yet most exciting technologies there is
- L2/L3: Comfortable with both
- BGP: It can be fun. Use it primarily in bare-🤘 setups. FRRouting, kube-router & cilium work great
Programming
- Golang: It has been my language of choice for quite a while now, and I've created several tools and libraries at Gini
- Python: Mostly for more straightforward tasks and one-offs
- Bash: You can get pretty far with it

📫 How to reach me

daniel at linuxaddicted dot de
Linktree
Twitter
Medium

django-pki's People

Contributors

Stargazers

Watchers

Forkers

max-arnold ochoto tparvis jaskinn tegereo packetperception fscook yaricp alexbel2404 bartzjegr

django-pki's Issues

Graphviz tree items duplication

Common name and name used in the mix. This leads to graphs with duplicate items.

PKCS12 version is removed when certificate is updated

Even if all PKCS12 related fields are unchanged the p12 version is removed.

init() got an unexpected keyword argument 'field_path'

When editing "Certificate Authorities" I get this error:

TypeError at /admin/pki/certificateauthority/

init() got an unexpected keyword argument 'field_path'

Request Method: GET
Request URL: http://localhost:9000/admin/pki/certificateauthority/
Django Version: 1.3
Exception Type: TypeError
Exception Value:

init() got an unexpected keyword argument 'field_path'

Exception Location: /usr/local/lib/python2.6/dist-packages/Django-1.3-py2.6.egg/django/contrib/admin/filterspecs.py in create, line 39
Python Executable: /usr/bin/python
Python Version: 2.6.6
Python Path:

['/var/www/CA',
'/usr/local/lib/python2.6/dist-packages/Django-1.3-py2.6.egg',
'/usr/local/lib/python2.6/dist-packages/South-0.7.3-py2.6.egg',
'/usr/local/lib/python2.6/dist-packages/django_pki-0.20.0-py2.6.egg',
'/usr/lib/python2.6',
'/usr/lib/python2.6/plat-linux2',
'/usr/lib/python2.6/lib-tk',
'/usr/lib/python2.6/lib-old',
'/usr/lib/python2.6/lib-dynload',
'/usr/local/lib/python2.6/dist-packages',
'/usr/lib/python2.6/dist-packages',
'/usr/lib/pymodules/python2.6']

Server time: ven, 8 Lug 2011 15:37:03 +0200

It seems to be related to the django version.

Bye,

RaSca

import existing CA

is there any plan to allow users to import an existing CA and then use it for signing?

Can't filter self-signed certificates

Self-signed certs have no parent. Therefore these field cannot be used to filter in the changelist

Creation of self-signed non CA certificates

Will result in a self-signed client or server certificate with X509v3 constraints "CA:FALSE, pathlen:0"

PEP 8 compliance

Time to make django-pki pep 8 compliant

(Extended) Key Usage

Maybe I have overlooked this, but is there an option to set "Certificate Key Usage" and "Extended Key Usage" using OIDs?

Certificate Key Usage

Critical
Signing
Non-repudiation
Key Encipherment
Data Encipherment

Extended Key Usage

Not Critical
TLS Web Server Authentication (1.3.6.1.5.5.7.3.1)
TLS Web Client Authentication (1.3.6.1.5.5.7.3.2)

Can the latter be done in the django-admin vai the dropdown "purpose"?

ImportError: No module named filterspecs

Although this project seems abandoned:

from django.contrib.admin.filterspecs import FilterSpec, RelatedFilterSpec
ImportError: No module named filterspecs

See:

New x509 extension fully added to config after two saves

This is because the m2m fields are saved after x509Extension. Working on a solution...

SubjectAltName DNS type must accept asterisk

Required for wildcard entries like *.my-company.com

Source tarball contains unnecessary files

The source tarball contains files like *.pyc, ._.DS_Store and .DS_Store. those are not needed for deployment of this applicaton. It would be nice to have them removed, e.g. do git checkout-index -a -f --prefix=/destination/path/ and run python setup.py sdist upload command there.

ValueError: too many values to unpack during migrate

On step 2.5 of http://dkerwin.github.com/django-pki/installation/configuration.html, when running migrate I'm getting this error:

(myproject_pinax)pkiplayground@pkiplayground:~/sandboxes/myproject/server2 [master]$ ./manage.py migrate
Running migrations for pki:
 - Migrating forwards to 0013_auto__add_field_certificate_crl_dpoints__del_field_certificateauthorit.
 > pki:0001_initial
 > pki:0002_auto__add_field_certificateauthority_crl_distribution
 > pki:0003_auto__add_pkichangelog
 > pki:0004_auto__add_keyusage__add_x509extension__add_extendedkeyusage__del_field
 > pki:0005_load_eku_and_ku_fixture
Installed 25 object(s) from 1 fixture(s)
 > pki:0006_update_objects_to_x509_extensions
 > pki:0007_auto__del_field_certificateauthority_subcas_allowed
 > pki:0008_auto__del_field_certificate_cert_extension
 > pki:0009_auto__del_field_certificateauthority_type
 > pki:0010_auto__del_field_certificate_pem_encoded__del_field_certificateauthorit
 > pki:0011_add_pki_download_permission
Adding content type 'pki | certificateauthority'
Adding content type 'pki | certificate'
Adding content type 'pki | pkichangelog'
Adding content type 'pki | x509extension'
Adding content type 'pki | keyusage'
Adding content type 'pki | extendedkeyusage'
 > pki:0012_auto__add_unique_keyusage_name__add_unique_extendedkeyusage_name
 > pki:0013_auto__add_field_certificate_crl_dpoints__del_field_certificateauthorit
Traceback (most recent call last):
  File "./manage.py", line 20, in <module>
    execute_from_command_line()
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/core/management/__init__.py", line 429, in execute_from_command_line
    utility.execute()
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/core/management/__init__.py", line 379, in execute
    self.fetch_command(subcommand).run_from_argv(self.argv)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/core/management/base.py", line 191, in run_from_argv
    self.execute(*args, **options.__dict__)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/core/management/base.py", line 220, in execute
    output = self.handle(*args, **options)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/management/commands/migrate.py", line 105, in handle
    ignore_ghosts = ignore_ghosts,
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/migration/__init__.py", line 191, in migrate_app
    success = migrator.migrate_many(target, workplan, database)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/migration/migrators.py", line 221, in migrate_many
    result = migrator.__class__.migrate_many(migrator, target, migrations, database)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/migration/migrators.py", line 298, in migrate_many
    interactive=self.interactive)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/db/generic.py", line 808, in send_pending_create_signals
    interactive=interactive)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/south/db/generic.py", line 855, in really_send_create_signal
    db=self.db_alias,
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/dispatch/dispatcher.py", line 172, in send
    response = receiver(signal=self, sender=sender, **named)
  File "/home/pkiplayground/python_envs/myproject_pinax/local/lib/python2.7/site-packages/django/contrib/auth/management/__init__.py", line 44, in create_permissions
    for ctype, (codename, name) in searched_perms:
ValueError: too many values to unpack
(myproject_pinax)pkiplayground@pkiplayground:~/sandboxes/myproject/server2 [master]$